In this post we are going to learn about the proper way to call a system command using node.js to avoid a common security flaw, command injection. A call that we often see used, due to it's simplicity ...

I'm under the impression that execFile on Travis spawns a shell and tries to run the command like it was a shell script.